Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft
File:                     C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft (raw, json)
Hash identifier:          MMKztlVAGVNAThxoPjEQGs2ldjPQx7OD3wY6swdf/w0=
Subject key identifier:   53:A8:AF:09:9C:34:31:DE:0C:3F:F1:70:41:F9:54:35:7B:94:1D:F1
Authority key identifier: C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
Certificate issuer:       /CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
Certificate serial:       5EECD48BE01EC0F2E25ADB89FD948939AAF91B44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft
Manifest number:          2F
Signing time:             Sun 14 Apr 2024 19:28:48 +0000
Manifest this update:     Sun 14 Apr 2024 19:23:48 +0000
Manifest next update:     Mon 15 Apr 2024 22:31:48 +0000
Files and hashes:         1: 3136382e3233322e34362e302f32332d3233203d3e20323634393439.roa (hash: ZAnaSLCT6qaKk3i4GdqG8QEHvUdtb4p8YPaEYhFNTYs=)
                          2: 3136382e3233322e34352e302f32342d3234203d3e20323634393439.roa (hash: bIl9q/z5/74EsDPjz3RxxcdW1at19Vr1DY7m/FPOBOs=)
                          3: 323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (hash: f71JRY49XwJ04cG++1Ua5VgTHwjleeY1gIPxCskRwbg=)
                          4: 3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa (hash: 95TBZtY6NPYcIPBSkH152BVcQmvKuaaoQVc28rkmuTY=)
                          5: C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.crl (hash: 3b5lLv1tSbfSxpPbq7r/Qn075uHI+hrVndaoYDqpEiE=)
                          6: 3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa (hash: hZDz84RGojmENqvsgPnC53TIBsHEnzx0N7qiIrqgfh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ec:d4:8b:e0:1e:c0:f2:e2:5a:db:89:fd:94:89:39:aa:f9:1b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
        Validity
            Not Before: Apr 14 19:23:48 2024 GMT
            Not After : Apr 15 22:31:48 2024 GMT
        Subject: CN=53A8AF099C3431DE0C3FF17041F954357B941DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:a2:d1:26:45:ff:ef:fc:e8:fe:f9:5b:e6:
                    e1:ae:fc:f7:95:bc:04:db:68:cf:e1:f7:2c:fc:4c:
                    75:36:b0:c1:4d:f1:f1:ec:c5:d0:59:44:c8:f0:61:
                    65:2b:c4:09:5d:18:f7:8b:e2:c8:3b:77:f5:a7:ee:
                    af:1c:55:46:a7:43:07:9c:f4:3a:0e:26:5a:aa:69:
                    f5:bc:92:ff:43:e5:86:81:9d:a1:22:fa:29:88:fc:
                    d1:48:e1:2a:c9:ab:45:8f:2f:76:5d:69:11:48:22:
                    af:a7:5d:86:06:23:bb:4b:3b:04:08:c3:f9:a2:95:
                    4b:2b:4f:58:30:75:d7:5f:5d:e7:54:fa:73:aa:2f:
                    ee:86:42:bd:07:8f:6c:de:70:81:ec:e9:d8:e8:c6:
                    61:79:b2:5b:8c:39:b5:32:c9:32:63:3b:41:13:25:
                    49:13:b0:2c:9a:14:f4:3f:dd:8e:37:e6:90:57:5c:
                    f7:97:00:45:60:cf:33:19:56:38:d0:7a:eb:ee:0c:
                    d4:51:30:48:b1:d2:86:36:30:1a:de:c0:2e:0b:0f:
                    10:c2:64:fd:8c:2d:d9:d1:ad:fc:2d:7a:1e:8f:57:
                    f3:d1:da:55:14:05:71:a7:03:f0:a4:46:8d:e6:e0:
                    3f:80:37:86:6d:50:25:54:aa:33:0d:b0:4d:95:05:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:AF:09:9C:34:31:DE:0C:3F:F1:70:41:F9:54:35:7B:94:1D:F1
            X509v3 Authority Key Identifier:
                keyid:C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:84:4c:24:e6:2c:f5:bc:1c:ed:ec:3e:11:07:34:36:84:99:
         b6:b0:0b:2e:c3:05:bc:2b:00:a0:b2:b6:77:7c:d1:29:57:9a:
         45:dd:a8:33:07:4b:39:7e:53:f7:ed:5b:08:97:a7:1a:9e:a6:
         71:ea:ac:91:1a:44:10:0a:fb:71:64:de:b6:8e:7e:52:1e:33:
         4c:44:43:ba:2c:e4:8a:ba:c1:8d:57:da:12:55:51:96:70:7c:
         0e:d0:d0:39:19:4d:1e:d8:73:c2:68:8e:49:c8:80:1e:c7:91:
         3d:2d:0c:34:b0:e3:45:e0:9e:d1:ef:46:90:75:a6:48:ac:39:
         fc:df:c5:01:7c:f4:99:2d:46:02:46:3f:b7:28:d7:7e:07:eb:
         84:65:72:4b:1c:43:47:71:d5:8a:f9:26:00:5f:fc:4a:17:d1:
         74:04:b1:19:d7:19:9d:23:7d:d6:a3:fa:1a:5f:f5:68:b2:9f:
         c3:c4:42:15:b6:51:15:f4:b3:0a:14:7c:c0:93:43:f1:5c:d1:
         4f:af:d4:03:6e:17:04:7e:7a:35:57:92:b4:ac:ad:cf:15:15:
         bc:01:24:bd:29:d1:b7:d0:c3:4c:d4:f1:3d:47:ab:22:ff:af:
         96:d3:7f:92:fe:0c:7b:9f:65:4a:5c:46:94:04:89:a0:4f:be:
         4c:16:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----